Le 19/07/2015 14:44, Moritz Muehlenhoff a écrit :

> https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3576 is scarce on
> details, but per the fixed upstream release probably affects oldstable
> and stable.

I suspect this was fixed with this commit [1]. This modification was
released with the version 5.11, but it wasn't included in the version
5.10.1 [1] as reported in the RedHat bug.

Emmanuel Bourg

[1] https://github.com/apache/activemq/commit/00921f2
[2]
https://github.com/apache/activemq/blob/activemq-5.10.1/activemq-broker/src/main/java/org/apache/activemq/broker/TransportConnection.java#L1536


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to